Advisoriesby IbisIBMCVE-2025-36076
IBM Cognos Analytics: information disclosure
No fix yet
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Cognos Analytics Product | >= 12.1.0, <= 12.1.3 FP1 | No fix yet |
| >= 12.0.4, <= 12.0.4 FP2 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-540